This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier: 92J20V8W04e+9pIEePOUsRCMmiL7AV4dEGraNTts9mg=
Subject key identifier: 70:E8:A6:07:B7:8B:E5:F9:FB:A2:25:A9:9E:F3:A2:EE:D4:6B:D1:D4
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 019C443513FD59E3190053C039ADDF935FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 21:00:55 +0000
Manifest this update: Mon 09 Feb 2026 21:00:55 +0000
Manifest next update: Tue 10 Feb 2026 21:00:55 +0000
Files and hashes: 1: 60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa (hash: EZkxwCyWCEu1KeBrV5jR0jwiImpY2bsUjKB0OADSv0M=)
2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: Y1WXv/8+jMDMTBRHS9Nui5HbLcRK3lWe/eGmg84K9Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:35:13:fd:59:e3:19:00:53:c0:39:ad:df:93:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Feb 9 21:00:55 2026 GMT
Not After : Feb 10 21:00:55 2026 GMT
Subject: CN=70e8a607b78be5f9fba225a99ef3a2eed46bd1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:81:8b:c6:61:6f:b9:3c:76:8c:dc:65:c4:
44:1c:0f:f1:cb:0c:32:03:18:1c:dd:61:5b:d5:7c:
90:aa:01:24:af:97:06:f1:7d:ba:91:ca:53:d1:6c:
f3:08:48:1c:2e:dd:b8:0a:e9:47:67:7d:70:23:d6:
bd:dc:f3:02:8c:51:43:0f:95:be:bf:a2:a4:d4:42:
e6:a0:4c:af:78:7a:de:9a:70:9b:83:26:12:1b:ff:
31:fb:ec:7e:24:47:d9:1f:66:71:0b:3f:92:ef:6e:
54:ca:2e:d5:8d:e1:4f:40:b0:52:b8:90:2c:f9:10:
0f:0f:b0:bf:07:47:1b:b2:51:b5:a4:31:90:7c:c0:
0d:e2:74:68:06:4e:cf:05:bb:86:2f:cb:ec:50:3f:
86:5b:d6:3d:9c:d0:4d:91:7c:d6:b8:66:fa:c7:10:
25:eb:c0:ac:3d:d1:13:34:2a:97:79:c8:fd:cb:c4:
d6:83:c9:9a:d7:2e:9b:2c:95:00:9d:14:b8:e1:5c:
c8:04:31:c0:2b:bc:d8:f9:a5:45:82:99:62:17:bc:
29:7b:a4:4e:52:27:ee:77:3a:3a:30:3a:f6:83:c3:
48:ca:09:ec:75:dd:3f:41:a9:f9:16:41:25:54:ad:
31:01:9a:97:e0:2d:1c:75:3b:d6:bf:71:fe:8b:7b:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:A6:07:B7:8B:E5:F9:FB:A2:25:A9:9E:F3:A2:EE:D4:6B:D1:D4
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3a:b0:b3:47:19:e8:5b:0e:61:e8:9a:ce:a4:4c:75:32:9d:
8a:f6:2b:29:db:04:7a:ae:79:4d:1d:d3:1e:42:4b:e1:a7:84:
54:f4:30:2b:33:fd:36:32:7f:3e:ef:a2:46:36:5d:c6:16:47:
a8:e5:27:e8:df:c0:64:56:65:90:3b:c0:c5:14:45:a7:f9:11:
f8:79:4f:3c:46:93:d4:a7:ef:90:29:27:30:f6:87:e3:96:45:
c3:0b:e3:a4:fd:70:5b:9d:b6:71:2f:b5:06:3f:91:b7:58:c1:
4a:c8:12:02:f8:2a:fe:bc:ce:05:35:98:51:63:b6:b4:8c:23:
ab:a3:a7:58:42:e5:20:c0:54:d8:e4:d0:6f:fe:24:e0:9f:67:
fb:49:1a:84:0a:33:a9:17:21:f0:db:dc:8d:55:c1:d8:80:35:
de:73:4c:28:84:50:d4:b1:85:c1:99:39:59:53:e5:58:b8:ce:
f9:dd:53:38:3b:7e:87:6d:f2:31:65:21:d2:a1:6f:25:49:57:
3f:ae:08:5d:fc:53:58:b7:cc:06:9d:33:0d:23:9f:b2:cb:5d:
27:84:36:72:27:0b:12:e1:12:e1:d0:9e:d1:ca:1a:2d:68:3f:
63:de:ac:60:2b:5e:46:bd:58:c8:07:49:65:5d:83:ec:5a:06:
a5:c8:b1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:01:34 2026 by rpki-client